The manufacturer implements measures for the vehicle type to (a) detect and prevent cyber-attacks against its vehicles, (b) support the manufacturer's monitoring capability for threats, vulnerabilities and attacks relevant to the type and (c) provide a data forensic capability to analyse attempted or successful attacks. The Interpretation Document: measures may sit on the vehicle or in its operational environment (back-end, mobile network), prevention may be delivered asynchronously after an attack is analysed, and forensic capability may include log data, diagnostic codes, operational and back-end information, for example a persisting circular log buffer, with privacy law respected.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.